Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          krDElUC9W6jfFQvawRbEtL9eQh18RhMK5V8C+K/2NwE=
Subject key identifier:   5B:C9:29:5B:4A:A4:63:89:21:1C:31:01:77:AD:BD:2E:6F:5A:9F:D9
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       01A128B139287D199D2C8743DD19AED7DAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          0469
Signing time:             Sun 11 Oct 2026 02:01:05 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:05 +0000
Manifest next update:     Mon 12 Oct 2026 02:01:05 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: Z1gOzbG0Ekr1KGlE5yLYcKq20Dj7vvDffEm9MB8xLmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:39:28:7d:19:9d:2c:87:43:dd:19:ae:d7:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Oct 11 02:01:05 2026 GMT
            Not After : Oct 12 02:01:05 2026 GMT
        Subject: CN=5bc9295b4aa46389211c310177adbd2e6f5a9fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:4d:7a:b9:3c:32:88:5c:63:a6:59:af:b4:
                    49:dd:6a:8a:79:a5:00:10:7b:b6:f0:f8:99:42:f8:
                    00:91:39:be:00:03:3e:e0:6d:9d:ef:e1:d7:b2:5f:
                    78:fc:20:49:67:01:28:d7:6b:44:ce:36:2e:6b:07:
                    48:80:93:e3:50:c3:eb:27:e1:fa:c4:bf:fa:a8:35:
                    c2:e6:5c:12:55:8f:7c:3e:ca:39:4c:b1:ed:f7:e7:
                    81:51:74:9a:bd:f8:3d:86:1f:20:da:9d:3c:99:3e:
                    cc:b2:aa:02:3f:c8:95:6e:54:a8:75:5d:4e:9b:c1:
                    8e:f1:0d:d8:6b:66:94:aa:71:2d:19:0b:46:50:1d:
                    2d:8e:bc:ed:4c:02:06:93:98:12:1f:fc:d0:df:c4:
                    27:8e:a1:bb:95:17:8f:3a:00:fb:f5:5d:59:71:aa:
                    44:d1:39:33:0a:94:22:0d:51:80:df:57:3b:f0:0d:
                    dd:14:8c:34:06:b3:78:a4:a5:3a:c0:5b:67:d1:96:
                    21:8e:f4:a5:05:27:4b:4f:b2:1a:4a:b1:b6:2c:e1:
                    31:36:7c:8d:e2:ee:39:9e:af:b2:bc:6d:29:51:b7:
                    9f:b6:b1:52:df:87:0b:e4:41:a9:5b:ca:74:83:98:
                    5e:1e:cf:3f:21:0d:d8:aa:ac:b2:6e:86:a1:80:dc:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:29:5B:4A:A4:63:89:21:1C:31:01:77:AD:BD:2E:6F:5A:9F:D9
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:e9:ab:d2:3e:07:6e:14:b1:16:74:96:45:a0:56:1d:7b:
         0d:cc:86:82:a5:71:e4:dd:df:d6:2a:16:54:6a:b1:3f:12:1c:
         17:a4:d2:c2:ec:1d:01:9a:0c:73:16:51:42:7d:6a:c3:db:60:
         fc:09:e2:9f:6c:7e:af:a4:97:3f:87:a1:d5:dc:e0:02:7b:96:
         33:ed:54:ec:a0:cd:da:ae:99:92:73:d1:87:ff:b2:25:28:5d:
         ca:6e:6f:11:26:2a:90:11:81:6a:3f:e0:9c:81:51:b1:7e:e0:
         df:32:b0:11:38:92:d2:e9:72:33:86:57:bc:8f:d3:d0:0c:64:
         92:f9:11:ba:01:24:23:9a:f4:aa:ea:ba:7d:6b:4f:39:4f:e3:
         8d:00:34:83:14:40:a3:28:69:07:90:a0:10:2d:be:c1:00:55:
         22:42:99:cf:9c:cb:3c:19:92:1b:15:a0:e7:27:26:49:d6:21:
         9e:da:7f:94:c4:81:54:20:b0:5c:f8:2c:82:97:35:17:88:1a:
         fa:37:ce:37:03:fe:db:dd:31:12:b5:90:aa:92:d7:c4:e5:4b:
         dd:73:eb:82:4e:16:90:4b:b0:ef:69:3c:82:a9:ff:fe:03:90:
         86:4f:1f:09:92:9f:3b:b9:1b:7d:4a:6a:c4:f9:12:c6:6e:2b:
         b8:2d:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:24 2026 by rpki-client